This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer (raw, json) Hash identifier: R/K4O+pFv8oL7tzUt4jC6GIGrSbm/e7Acd/BkDTgbqM= Subject key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15DC9FF5907BC4687465194C53D7CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50726 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:dc:9f:f5:90:7b:c4:68:74:65:19:4c:53:d7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:04:a6:ad:28:13:c9:53:7d:46:5a:b7:c6:4e: 8d:e1:64:6c:52:b7:6a:91:92:0c:73:40:74:fe:3f: d7:d4:4e:fd:c6:08:c2:b0:54:40:73:da:ed:a7:f4: f5:d0:e7:f3:12:4d:44:89:82:ef:be:09:6e:a2:6d: f4:b2:64:e7:5e:8a:74:83:f9:aa:67:9d:ff:16:45: 7d:fc:b5:23:0e:c0:24:dc:dc:55:bb:f5:67:54:95: 87:46:0a:48:66:bf:81:86:97:20:78:6f:38:b5:ab: d1:c4:6c:28:db:b6:9a:a7:8a:ef:c4:bb:0f:c6:11: bc:71:4c:4b:cb:9f:2f:2f:c9:02:6d:2c:e6:4f:27: 12:45:bc:6f:f5:ab:14:89:9f:33:98:87:20:16:f8: e9:dc:f3:2a:13:1f:c5:09:35:89:96:d8:83:f9:93: 5e:42:6b:88:59:fe:99:7a:55:3d:c1:10:00:2f:96: 88:02:74:63:66:5c:c9:db:61:7d:59:59:75:87:98: eb:e4:57:b7:67:e7:5b:25:55:74:b5:b6:09:cf:d8: fa:ae:48:5e:16:cf:92:fd:a3:23:d4:e9:16:87:da: 51:52:53:38:e4:b6:4e:f8:b3:9a:b0:c1:ab:45:74: f9:2f:7b:e8:14:4a:e6:b6:fe:f8:46:20:a4:69:07: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50726 Signature Algorithm: sha256WithRSAEncryption 03:af:7d:c5:09:ae:4b:26:95:9d:5d:44:bf:c8:7d:0c:35:c3: f0:33:fb:e7:44:8e:1f:09:f7:21:9c:76:2b:db:6d:9a:7d:52: 75:8d:fc:1f:91:3f:5e:b5:03:55:86:7e:34:e2:4e:c7:59:40: 87:3d:f4:90:75:a7:45:e4:f2:63:1d:0d:0b:b4:aa:f5:99:a1: fd:71:8d:e1:c9:6b:fe:bb:15:7e:da:e5:fb:ea:e6:1e:94:f2: 00:cc:ef:26:96:a0:9d:c2:44:79:34:47:9b:bc:73:6e:3a:1a: 16:91:8f:35:86:39:8e:0b:31:32:c0:b4:0c:91:87:7a:c9:df: 28:f8:8c:ed:f6:d4:b4:ab:79:ad:0d:b1:99:c2:f0:c6:02:06: dd:e0:18:ed:de:c1:31:ab:99:a2:29:3d:f2:d5:5d:25:bb:13: b0:5b:a7:4d:f2:11:7c:d3:d7:16:ed:6e:78:91:7c:18:96:cd: cd:58:0f:64:46:3f:23:4d:16:dc:ea:95:e9:a8:11:26:b5:46: c7:11:f3:69:10:fe:4d:63:e7:35:af:2c:75:b1:6a:cb:01:25: 5f:53:a3:9e:36:5a:0a:93:c7:3a:dd:7b:4a:60:e5:23:46:80: 42:b9:b5:6b:e3:32:48:1f:b6:8f:00:38:b5:a7:ab:34:a5:06: 7c:51:6a:0f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/Fdyf9ZB7xGh0ZRlMU9fMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWJlNGU5MDliZWI2YzJhMWQyZDY2ODJiMDljNjgyYTI0MWM0YmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QSmrSgTyVN9Rlq3xk6N4WRsUrdq kZIMc0B0/j/X1E79xgjCsFRAc9rtp/T10OfzEk1EiYLvvgluom30smTnXop0g/mq Z53/FkV9/LUjDsAk3NxVu/VnVJWHRgpIZr+BhpcgeG84tavRxGwo27aap4rvxLsP xhG8cUxLy58vL8kCbSzmTycSRbxv9asUiZ8zmIcgFvjp3PMqEx/FCTWJltiD+ZNe QmuIWf6ZelU9wRAAL5aIAnRjZlzJ22F9WVl1h5jr5Fe3Z+dbJVV0tbYJz9j6rkhe Fs+S/aMj1OkWh9pRUlM45LZO+LOasMGrRXT5L3voFErmtv74RiCkaQdLsQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCW+TpCb62wqHS1mgrCcaCokHEvGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzI5Y2I3 Yi1lZDllLTQyMDUtODg4YS03NTNkZmNkYWE2YmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMjljYjdi LWVkOWUtNDIwNS04ODhhLTc1M2RmY2RhYTZiZi8xL0piNU9rSnZyYkNvZExXYUNz SnhvS2lRY1M4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDGJjANBgkqhkiG9w0BAQsFAAOCAQEAA699xQmuSyaV nV1Ev8h9DDXD8DP750SOHwn3IZx2K9ttmn1SdY38H5E/XrUDVYZ+NOJOx1lAhz30 kHWnReTyYx0NC7Sq9Zmh/XGN4clr/rsVftrl++rmHpTyAMzvJpagncJEeTRHm7xz bjoaFpGPNYY5jgsxMsC0DJGHesnfKPiM7fbUtKt5rQ2xmcLwxgIG3eAY7d7BMauZ oik98tVdJbsTsFunTfIRfNPXFu1ueJF8GJbNzVgPZEY/I00W3OqV6agRJrVGxxHz aRD+TWPnNa8sdbFqywElX1OjnjZaCpPHOt17SmDlI0aAQrm1a+MySB+2jwA4taer NKUGfFFqDw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:34 2026 by rpki-client